<!DOCTYPE html
  PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
  "DTD/xhtml1-strict.dtd">
<html>
  <head>
    <title>volatility.plugins.malware.cmdhistory : API documentation</title>
    <meta content="text/html;charset=utf-8" http-equiv="Content-Type" />
    <link href="apidocs.css" type="text/css" rel="stylesheet" />
    
    
  </head>
  <body>
    <h1 class="module">v.p.m.cmdhistory : module documentation</h1>
    <p>
      <span id="part">Part of <a href="volatility.html">volatility</a>.<a href="volatility.plugins.html">plugins</a>.<a href="volatility.plugins.malware.html">malware</a></span>
      
      
    </p>
    <div>
      
    </div>
    <div class="undocumented">No module docstring</div>

    
    
    <div id="splitTables">
      <table class="children sortable" id="id145">
  
  
<tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.malware.cmdhistory.CmdHistoryVTypesx86.html">CmdHistoryVTypesx86</a></td>
    <td><span>This modification applies the vtypes for 32bit Windows up to Windows 7.</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.malware.cmdhistory.CmdHistoryVTypesx64.html">CmdHistoryVTypesx64</a></td>
    <td><span>This modification applies the vtypes for 64bit Windows up to Windows 7.</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.malware.cmdhistory.CmdHistoryVTypesWin7x86.html">CmdHistoryVTypesWin7x86</a></td>
    <td><span>This modification applies the vtypes for 32bit Windows starting with Windows 7.</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.malware.cmdhistory.CmdHistoryVTypesWin7x64.html">CmdHistoryVTypesWin7x64</a></td>
    <td><span>This modification applies the vtypes for 64bit Windows starting with Windows 7.</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.malware.cmdhistory.CmdHistoryObjectClasses.html">CmdHistoryObjectClasses</a></td>
    <td><span>This modification applies the object classes for all versions of 32bit Windows.</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.malware.cmdhistory.CmdScan.html">CmdScan</a></td>
    <td><span>Extract command history by scanning for _COMMAND_HISTORY</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.malware.cmdhistory.Consoles.html">Consoles</a></td>
    <td><span>Extract command history by scanning for _CONSOLE_INFORMATION</span></td>
  </tr><tr class="class private">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.malware.cmdhistory._CONSOLE_INFORMATION.html">_CONSOLE_INFORMATION</a></td>
    <td><span>object class for console information structs</span></td>
  </tr><tr class="class private">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.malware.cmdhistory._CONSOLE_PROCESS.html">_CONSOLE_PROCESS</a></td>
    <td><span>object class for console process</span></td>
  </tr><tr class="class private">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.malware.cmdhistory._SCREEN_INFORMATION.html">_SCREEN_INFORMATION</a></td>
    <td><span>object class for screen information</span></td>
  </tr><tr class="class private">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.malware.cmdhistory._EXE_ALIAS_LIST.html">_EXE_ALIAS_LIST</a></td>
    <td><span>object class for alias lists</span></td>
  </tr><tr class="class private">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.malware.cmdhistory._COMMAND_HISTORY.html">_COMMAND_HISTORY</a></td>
    <td><span>object class for command histories</span></td>
  </tr>
  
</table>
      
      
    </div>
    
    
    

    
    <address>
      <a href="index.html">API Documentation</a> for Volatility 2.2, generated by <a href="http://codespeak.net/~mwh/pydoctor/">pydoctor</a> at 2013-06-24 15:16:10.
    </address>
  </body>
</html>